VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 1
INTRODUCTION
A Virtual Private Network (VPN’s) is the Combination of Private and Public Networks.
such as Internet. VPN Performs Secure data Transmission from one end to another end
Whenever we want to transfer our Important data Through a network, due to Security
Concern for that data we leased a private network for transferring data in secure way because
in Public network Proper Security features are not available which harms our data, Same way
Secure transmission of data by using Private Network Charges very high. So VPN is a Best
Solution to transfer our Data through secure as well as cheaper medium as compared to
Private Network. The Secure Connection across the internet appears to the user as a Private
Network Communication-despite the fact that this Communication occurs over a Public
Internetwork- hence the name Virtual Private Network. A VPN sends data between two
Systems across a Public Network in such a way that the transmitted data is transparent to the
other Systems Connected in the Network. VPN emulates Point to Point link between the two
system so we get the transparency in data transmission. Point to Point link is Provided by
Encapsulation is done by wrapping the data with a header, In header it Provides Routing
Information. This Process is Known as Tunneling. To Provide Confidentiality to the
encapsulated data, the data is Secured by Encryption. When Data reaches to the end Point of
Tunnel, the Process of Decryption is Performed on Encapsulated data and forwarded to its
final Destination Point.
Nowadays, the market place is very competitive and doing business without the help of IT is
impossible. Companies are always in the hunt for latest technologies to help them obtain
smooth processes and to create a competitive edge. One of the most useful technologies in
that sense is virtual privates networks (VPNs). It enables various secure connections through
public networks, mostly WANs, and creates ―private‖ channels. IT departments including
network administrators, and IS professionals can adapt this technology in their organizations.

Fig1.1: Virtual Private Network Server

Department of MCA CIT, Mandya Page 1 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 2

SYSTEM ARCHITECTURE OF VPN SEVER

A VPN as shown in figure illustrates VPN architecture which consists of four components:
a VPN client, a network access server NAS, a tunnel terminating device called VPN server
and a VPN protocol. VPN is client is connecting to NAS through public switched telephone
network PSTN network. In a typical access VPN connection, a remote user or VPN client.
initiates a point to point protocol PPP connection with the ISP’s NAS via the public switched
telephone network PSTN. The NAS is owned by the ISP, and is usually implemented in the
ISP’s Point of Presence pop. After the user has been authenticated by the appropriate
authentication method, the NAS directs the packet to the IP tunnel that connects both the
NAS and the VPN server. The VPN server may reside in the ISP’s PoP or at the corporate
site, depending on the VPN model that is implemented. The VPN server recovers the packet
from the tunnel, unwraps it, and delivers it to the corporate network.

Fig 2.1: VPN Server Architecture

Department of MCA CIT, Mandya Page 2 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 3
OPERATING PRINCIPLE OF VPN
Virtual private network technology is based on the idea of tunneling. VPN tunneling
involves establishing and maintaining a logical network connection (that may contain
intermediate hops). On this connection, packets constructed in a specific VPN protocol
format are encapsulated within some other base or carrier protocol, then transmitted between
VPN client and server, and finally de-encapsulated on the receiving side. For Internet-based
VPNs, packets in one of several VPN protocols are encapsulated within Internet Protocol (IP)
packets. VPN protocols also support authentication and encryption to keep the tunnels secure.

3.1 Types of VPN Tunneling

 Voluntary tunneling.
 Compulsory tunneling.

Both types of tunneling are commonly used.

In voluntary tunneling, the VPN client manages connection setup. The client first makes a
connection to the carrier network provider (an ISP in the case of Internet VPNs).
Then, the VPN client application creates the tunnel to a VPN server over this live connection.

In compulsory tunneling, the carrier network provider manages VPN connection setup. When
the client first makes an ordinary connection to the carrier, the carrier in turn immediately
brokers a VPN connection between that client and a VPN server. From the client point of
view, VPN connections are set up in just one step compared to the two-step procedure
required for voluntary tunnels.

Compulsory VPN tunneling authenticates clients and associates them with specific VPN
servers using logic built into the broker device. This network device is sometimes called the
VPN Front End Processor (FEP), Network Access Server (NAS) or Point of Presence Server
(POS). Compulsory tunneling hides the details of VPN server connectivity from the VPN
clients and effectively transfers management control over the tunnels from clients to the ISP.
installing and maintaining FEP devices.

Department of MCA CIT, Mandya Page 3 of 21

 VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 4
VPN TUNNELING PROTOCOLS
Several computer network protocols have been implemented specifically for use with VPN
tunnels. The three most popular VPN Tunneling protocols listed below continue to compete
with each other for acceptance in the industry. These protocols are generally incompatible
with each other. Following are the protocols used:
 Point-to-Point Tunneling Protocol (PPTP)

 Layer Two Tunneling Protocol (L2TP)

 Internet Protocol Security (IPsec)

 Secure Socket Layer (SSL)

4.1 Point-to-Point Tunneling Protocol (PPTP)

Several corporations worked together to create the PPTP specification. People generally
associate PPTP with Microsoft because nearly all flavors of Windows include built-in client
support for this protocol. The initial releases of PPTP for Windows by Microsoft contained
security features that some experts claimed were too weak for serious use. Microsoft
continues to improve its PPTP support, throughout.

4.2 Layer Two Tunneling Protocol (L2TP)

The original competitor to PPTP for VPN Tunneling was L2F (Layer 2 forwarding), a
protocol implemented primarily in Cisco products. In an attempt to improve on L2F, the best
features of it and PPTP were combined to create new standard called L2TP. Like PPTP,
L2TP exists at the data link layer (Layer Two) in the OSI model.

4.3 Internet Protocol Security (IPsec)

IPsec is actually a collection of multiple related protocols. It can be used as a complete VPN
protocol solution, or it can use simply as the encryption scheme within L2TP or PPTP. IPsec
exists at the network layer (Layer Three) of the OSI model. IPsec protocols operate at the
network layer, layer 3 of the OSI model. Other Internet security protocols in widespread use,
such as SSL(Secure Socket layer) and TLS(Tansport layer security), operate from the
transport layer up (OSI layers 4 - 7). This makes IPsec more flexible,

Department of MCA CIT, Mandya Page 4 of 21

VIRTUAL PRIVATE NETWORK SERVER

4.4 (Secure Socket layer protocol) SSP

The Secure Sockets Layer (SSL) protocol. Originally developed by Netscape, SSL has been
universally accepted on the World Wide Web for authenticated and encrypted
communication between clients and servers. SSL runs above TCP/IP and below highlevel
application protocols. SSL server authentication allows a user to confirm a server's identity.
SSL-enabled client software can use standard techniques of public-key cryptography to check
that a server's certificate and public ID are valid and have been issued by a certificate
authority (CA) listed in the client's list of trusted CA’s. This confirmation might be important
if the user, for example, is sending a credit card number over the network and wants to check
the receiving server's identity.

Fig 4.1: VPN Protocols

Department of MCA CIT, Mandya Page 5 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 5

HOW DOES A VPN WORK?

A VPN creates an encrypted 'tunnel' between two or more locations. Information sent
between the locations cannot be read by anyone between. The VPN system works in various
ways. Once the VPN server has been installed at a central location, the client servers can
connect to it setting up encrypted communications between the different locations.

Fig 5.1: Working Of VPN Server

The security of the VPN network is multi-layered. Initially a single packet of information is
sent from the client to the server, this piece of information contains a PSK (Pre-Shared Key)
only if this key is both present and correct will the VPN server respond. The response is a
request for our 2048 bit certificate that is used to authenticate the client to the server. Once
the certificate is tested and confirmed, the client and server negotiate the set up of an
encrypted 'tunnel' between the two locations. This is repeated for every client machine
connected to the VPN. There are number of other security features that are utilized between
the servers and clients. Once the VPN has been installed, data traveling out of the network is
analyzed for its destination. Data that is destined for the Internet, for example web browsing
or email pass out onto the Internet as per usual. However, data that is destined for another
location on the VPN network is detected and routed through the encrypted VPN network to
the alternate location where it is decrypted and passed onto its final destination.

The VPN server and clients renegotiate the encryption for the 'tunnels' once per hour to
ensure the encryption keys used rotate before enough data has been transferred to enable any
possibility of the VPN being hacked.

Department of MCA CIT, Mandya Page 6 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 6

INTERNET IMPLEMENTATION WITH VPN

A VPN is a secure, private communication tunnel between `two or more devices across a
public network (like the Internet). These VPN devices can be either a computer running VPN
software or a special device like a VPN enabled router. It allows your home computer to be
connected to your office network or can allow two home computers in different locations to
connect to each over the Internet.

Fig 6.1: Internet Implementation of VPN

6.1 Internet VPN Features

 Internet VPNs are between a company and its strategic partners, customers, suppliers
& whole world.
 Internet VPNs require an open, standards-based solution to ensure interoperability.
The accepted standard for Internet-based VPNs is the Internet Protocol Security
[IPSec] standard.
 Internet VPNs use traffic control to eliminate bottlenecks at network access points and
guarantee.

Department of MCA CIT, Mandya Page 7 of 21

 VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 7

TYPES OF VPN SERVER

VPN stands for Virtual Private Network (VPN) that allows a user to connect to a private
network over the Internet securely and privately. VPN creates an encrypted connection that
is called VPN tunnel. and all Internet traffic and communication is passed through this
secure tunnel. Virtual Private Network (VPN) is basically of 2 types:

7.1 Remote Access VPN

Remote Access VPN permits a user to connect to a private network and access all its
services and resources remotely. The connection between the user and the private network
occurs through the Internet and the connection is secure and private. Remote Access VPN
is useful for home users and business users both. An employee of a company, while he/she
is out of station, uses a VPN to connect to his/her company’s private network and remotely
access files and resources on the private network. Private users or home users of VPN,
primarily use VPN services to bypass regional restrictions on the Internet and access
blocked websites. Users aware of Internet security also use VPN services to enhance their
Internet security and privacy.

7.2 Site to Site VPN

A Site-to-Site VPN is also called as Router-to-Router VPN and is commonly used in the
large companies. Companies or organizations, with branch offices in different locations,
use Site-to-site VPN to connect the network of one office location to the network at another
office location.

 Intranet based VPN: When several offices of the same company are connected using
Site-to-Site VPN type, it is called as Intranet based VPN.
 Extranet based VPN: When companies use Site-to-site VPN type to connect to the
office of another company, it is called as Extranet based VPN.

7.3 Cloud VPN

A Cloud VPN is a virtual private network that allows users to securely connect to a cloud-
based infrastructure or service. It uses the internet as the primary transport medium to
connect the remote users to the cloud-based resources. Cloud VPN typically offered as a

Department of MCA CIT, Mandya Page 8 of 21

 VIRTUAL PRIVATE NETWORK SERVER

service by cloud providers such as Amazon Web Services (AWS) and Microsoft [Link]
uses the same encryption and security protocols as traditional VPNs, such as IPsec or SSL,
to ensure that the data transmitted over the VPN is secure. Cloud VPNs are often used by
organizations to securely connect their on-premises resources to cloud-based resources,
such as cloud-based storage or software-as-a-service (SaaS) applications.

7.4 Mobile VPN

Mobile VPN is a virtual private network that allows mobile users to securely connect to a
private network, typically through a cellular network. It creates a secure and encrypted
connection between the mobile device and the VPN server, protecting the data transmitted
over the connection. Mobile VPNs can be used to access corporate resources, such as email
or internal websites, while the user is away from the office. They can also be used to
securely access public Wi-Fi networks, protecting the user's personal information from
being intercepted. Mobile VPNs are available as standalone apps or can be integrated into
mobile device management (MDM) solutions. These solutions are commonly used by
organisations to secure their mobile workforce.

7.5 SSL VPN

SSL VPN (Secure Sockets Layer Virtual Private Network) is a type of VPN that uses the
SSL protocol to secure the connection between the user and the VPN server. It allows
remote users to securely access a private network by establishing an encrypted tunnel
between the user's device and the VPN server. SSL VPNs are typically accessed through a
web browser, rather than through a standalone client. This makes them easier to use and
deploy, as they don't require additional software to be installed on the user's device. It can
be used to access internal resources such as email, file servers, or databases. SSL VPNs are
considered more secure than traditional IPsec VPNs because they use the same encryption
protocols as HTTPS, the secure version of HTTP used for online transactions.

7.6 PPTP (Point-to-Point Tunneling Protocol) VPN

PPTP (Point-to-Point Tunneling Protocol) is a type of VPN that uses a simple and fast
method for implementing VPNs. It creates a secure connection between two computers by
encapsulating the data packets being sent between them. PPTP is relatively easy to set up
and doesn't require any additional software to be installed on the client's device. It can be
used to access internal resources such as email, file servers, or databases.

Department of MCA CIT, Mandya Page 9 of 21

 VIRTUAL PRIVATE NETWORK SERVER

7.7 L2TP (Layer 2 Tunneling Protocol) VPN

L2TP (Layer 2 Tunneling Protocol) is a type of VPN that creates a secure connection by
encapsulating data packets being sent between two computers. L2TP is an extension of
PPTP, it adds more security to the VPN connection by using a combination of PPTP and
L2F (Layer 2 Forwarding Protocol) and it uses stronger encryption algorithm than PPTP.
L2TP is relatively easy to set up and doesn't require additional software to be installed on
the client's device.

7.7 Open VPN

Open VPN is an open-source software application that uses SSL and is highly configurable
and secure. It creates a secure and encrypted connection between two computers by
encapsulating the data packets being sent between them. OpenVPN can be used to access
internal resources such as email, file servers, or databases. It is supported on a wide range
of operating systems and devices, and can be easily configured to work with various
network configurations and security settings. It is considered one of the most secure VPN
protocols as it uses the industry standard SSL/TLS encryption protocols and it offers
advanced features such as two-factor authentication and kill switch.

Fig 7.1: Remote Access Together

Department of MCA CIT, Mandya Page 10 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 8

AUTHENTICATION MECHANISM IN VPN

Virtual private networks can be a cost effective and secure way for different corporations
to provide users access to the corporate network and for remote networks to communicate
with each other across the Internet. VPN connections are more cost-effective than dedicated
private lines; usually a VPN involves 2 parts: the protected or "inside" network, which
provides physical and administrative security to protect the transmission; and a less
trustworthy, "outside" network or segment (usually through the Internet). Generally, a
firewall sits between a remote user's workstation or client and the host network or server. As
the user's client establishes the communication with the firewall, the client may pass
authentication data to an authentication service inside the perimeter. A known trusted person,
sometimes only when using trusted devices, can be provided with appropriate security
privileges to access resources not available to general users.
Many VPN client programs can be configured to require that all IP traffic must pass through
the tunnel while the VPN connection is active, for increased security. From the user's
perspective, this means that while the VPN connection is active, all access outside the secure
network must pass through the same firewall as if the user were physically connected to the
inside of the secured network. This reduces the risk that an attacker might gain access to the
secured network by attacking the VPN client's host machine: to other computers on the
employee's home network, or on the public internet, it is as though the machine running the
VPN client simply does not exist. Such security is important because other computers local to
the network on which the client computer is operating may be un-trusted or partially trusted.
Even with a home network that is protected from the outside internet by a firewall, people
who share a home may be simultaneously working for different employers over their
respective VPN connections from the shared home network.
Each employer would therefore want to ensure their proprietary data is kept secure, even if
another computer in the local network gets infected with malware. And if a traveling
employee uses a VPN client from a Wi-Fi access point in a public place, such security is even
more important. However, the use of IPX/SPX is one way users might still be able to access
local resources. VPN use the L2TP Protocol with IP sec to provide the authentication.

Department of MCA CIT, Mandya Page 11 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 9

VPN SERVER HARDWARE OR SOFTWARE

9.1 HARDWARE
Some VPN solutions use dedicated hardware appliances that are specifically designed for the
tasks of tunneling, encryption, and user authentication. These devices usually operate as
encrypting bridges and they are often placed between the routers on the networks. Although
most of these hardware tunnels are designed for fixed configurations, some products also
support remote access tunneling. Many of these products perform very well on throughput
and when handling large numbers of simultaneous tunnels, which is crucial for supporting a
large number of users. Hardware solutions are generally considered to be more secure and
provide good logging and reporting options.

9.2 SOFTWARE
One user between a remote client and a security gateway can install VPN client software on
laptops and individual PCs for use. VPN software may be used on a server that will act as a
VPN gateway for an entire site to create and manage tunnels between a pair of security
gateways.
These VPN software systems are often good low-cost choices for networks that are relatively
small and which do not have to process a lot of traffic. Such solutions can run on existing
servers, share resources with existing applications and serve as a good starting point for
getting familiar with VPN Many of these systems are well suited for remote access
connections. Software-based VPN solutions allow great flexibility in terms of
implementation and usage, but flexibility brings extra management and support costs.

9.3 The impact and benefits of VPNs

VPNs allow institutions to take advantage of the Internet’s infrastructure for secure, private
communications between schools, remote sites, and home-based workers. Access to a
school’s LAN is entirely possible from home before, during or after school hours. A user can
access all of resources on the LAN as if they were actually on site.

Department of MCA CIT, Mandya Page 12 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 10
VPN SERVER
The VPN implementations can be classified broadly into one of the following:
9.3.1 Overlay model
9.3.2 Peer-to-peer model

10.1 Overlay model

The provider did not participate in customer routing. It provides the customer with transport
of data using virtual point-to-point links (PVC or SVC).The drawback of an Overlay model
was the full mesh of virtual circuits between all customer sites for optimal connectivity. N
sites need N(N-l )/2 circuits. Overlay VPNs provides either Layer 1 (physical layer)
connectivity or a Layer 2 transport circuit between customer sites for transportation of Layer
2 frames (Or cells) which was traditionally implemented using either Frame Relay or ATM
switches.

10.2 Peer-to-peer model

The peer-to-peer model was developed to overcome the drawbacks of the Overlay [Link]
service provider would actively participate in customer RoutingRouting information is
exchanged between the customer routers and the SP routers. The peer-to-peer model,
consequently, does not require the creation of virtual [Link] of customer-specific
routing information is achieved by implementing packet filters at the routers connecting to
the customer network.

Fig 10.1: VPN Server

Department of MCA CIT, Mandya Page 13 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 11

WHAT IS THE USE OF VPN?

An organization can realize substantial financial savings and significantly increase its
productivity by using a VPN. To be able to make use of the equipment that you have in your
office, such as printers, databases, file and email servers used to mean that you'd need to be
physically present in the [Link] provision of a VPN makes it possible to make use of all
the information, equipment and resources that are located within the office building, but from
any location that you wish. For organizations that work from multiple locations, such as
regional sales offices, this allows information equipment and resources to be shared between
the offices as if they were located in the same building One of the key benefits of a VPN
network is the ability for you and your team to be able to work from home or indeed any
location throughout the world, as effectively as from the office. This could result in a major
increase in both your and your team’s quality of life, with both more time available to spend
with your family and dramatically reducing the time wasted commuting to work everyday
Significant cost savings can be made by organizations employing a VPN network through the
increases in productivity of team members and the reduced costs of having to pay for large
premises.

11.1 Characteristics In Application

A well-designed VPN can provide great benefits for an organization. It can
 Extend geographic connectivity.
 Improve security where data lines have not been ciphered.
 Reduce operational costs versus traditional WAN.
 Reduce transit time and transportation costs for remote users.
 Simplify network topology in certain scenarios.
 Provide global networking opportunities.
 Provide telecommuter support.
 Provide broadband networking compatibility.
 Provide faster ROI (return on investment) than traditional carrier leased/owned WAN
line.
 Show a good economy of scale.

Department of MCA CIT, Mandya Page 14 of 21

VIRTUAL PRIVATE NETWORK SERVER

11.2 What Are The Benefits Of Using VPN Server

There are several reasons to use VPNs. Sensitive data security is undoubtedly a major
issue, as well as other matters such as losing passwords, which contrary to popular belief is
not the worst possible fate. For example, if a multi-branch software development company
stores its software source files in a central CVS repository, and a rival IT Company manages
to intercept network traffic between the branch and the CVS, it may steal some brilliant ideas
incorporated in the software programs. The amount of damages involved in such a case may
be millions of dollars however possible lawsuits are rarely as quick and straightforward as
expected. From the economic point of view, creation of a VPN may be less expensive than
maintaining leased lines, although the cost of VPN firmware may appear to be enormous. In
fact, lost data may turn out to be far more expensive. Costly equipment is rarely needed to
implement a VPN. In practice, any Microsoft Windows machine can be used as the VPN
client and any Windows 2000 or Windows .NET computer can be configured to be the VPN
server.

11.3 VPN Components: Security

1. Encryption

• Technique for scrambling and unscrambling information

• Unscramble – called clear-text

• Scrambled information – cipher-text

2. Keys
• Secret code that the encryption algorithm uses to create a unique version of cipher-
text
• 8-bits keys = 256 combinations or two to the eighth power

• 16-bits keys = 65,536 combinations or two to the 16 th power

• 56-bits keys = 72,057,594,037,927,900 or two to the 56 th power

• 168-bits keys …

Department of MCA CIT, Mandya Page 15 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 12

FEATURES OF A VPN SERVER

It gives reasonable to expect that a fixed hardware VPN, which covers multiple sites should
have more features than a software remote access solution.

12.1 Some of the main features are:

1. Security- tunneling support between sites with at least 128bit encryption of the data.

2. Scalability - extra users and bandwidth can be added easily to adapt to new
requirements.
3. Services - quality of service features, including bandwidth, management and traffic
shaping, are important to avoid congestion.
4. Management- reports on user activity, management of user policies and monitoring of
the VPN as a whole.
5. Encryption - One of the main functions of a VPN is to block attempts by unauthorized
users to intercept, read, or alter the content of your internet traffic. It achieves this by
converting your actual data into an unreadable and coded format through a process called
encryption
6. Split Tunneling- Split tunneling is a feature of Virtual Private Networks (VPNs) that
let you route your internet traffic through two different tunnels, one of which is
encrypted while the other one is your open network.
7. AAA - authentication (who is the user), authorization (what is the user allowed to do)
and accounting (recording what the user actually does).
8. Integration with Zero Trust Security Models: Businesses are moving away from
traditional VPNs toward zero-trust network access (ZTNA) — allowing access based on identity
and context, not just network location..

9. Smart Routing & Split Tunneling: Advanced VPNs will offer smart routing: only
sensitive traffic goes through the VPN, improving speed and efficiency.
10. Privacy Legislation Impact: Laws like GDPR and potential global digital privacy
laws will force VPN providers to be more transparent and accountable with data handling.

Department of MCA CIT, Mandya Page 16 of 21

VIRTUAL PRIVATE NETWORK SERVER

CHAPTER 13
ADVANTAGES AND DISADVANTAGES
13.1 Advantages

1. Privacy & Anonymity:

 A VPN hides your real IP address and encrypts your internet traffic, which makes
your online activities more private.
 This is particularly useful when browsing in public networks or when trying to
keep your browsing habits private from websites and even your ISP (Internet
Service Provider).
2. Security:
 VPNs encrypt your data, protecting it from hackers and cybercriminals,
especially on unsecured networks like public Wi-Fi in cafes, airports, etc.
 It prevents Man-in-the-Middle attacks, where attackers intercept
communication between you and a website.

3. Bypass Geo-restrictions:
 VPNs can help bypass geographical restrictions (like Netflix content or regional
news websites) by making it appear as though you're accessing the internet
from a different country.
4. Access Restricted Content:
 Some countries or organizations restrict access to certain websites or services (like
social media). A VPN allows you to bypass these restrictions.
5. Remote Access:
 Businesses use VPN servers to let employees securely access internal company
networks and files from anywhere in the world.
6. Data Encryption:
 VPNs encrypt data transfers, protecting sensitive information like login
credentials, business files, or financial transactions.

Department of MCA CIT, Mandya Page 17 of 21

VIRTUAL PRIVATE NETWORK SERVER

13.2 Disadvantages
7. Reduced Speed:

 VPNs can slow down your internet connection because of the encryption process and
the longer route your data travels through VPN servers.
 The extent of slowdown depends on the VPN provider and the server location you're
connecting to.

8. Connection Reliability:

 Some VPNs have unstable connections, leading to occasional drops, which could be
annoying when streaming or working.
 If your VPN connection drops, your real IP could potentially be exposed if you don’t
use a "kill switch" feature.

9. Legal & Policy Issues:

 In some countries, the use of VPNs is restricted or even illegal. For example, in
countries like China, the UAE, or Russia, VPN use can lead to fines or
imprisonment.
 Some websites or services may block or restrict access from known VPN IP
addresses, limiting your ability to access certain content.

10. False Sense of Security:

• A VPN only encrypts your internet traffic—it doesn’t protect against malware,
phishing, or bad security habits.

11. Blocked Services:

• Some websites and services (e.g., Netflix, banking sites) block VPN traffic,
preventing access while connected.

Department of MCA CIT, Mandya Page 18 of 21

VIRTUAL PRIVATE NETWORK SERVER

13.2 EXAMPLE OF VPN’S

1. Extranet For Business Partners With Help Of VPN:

The network administrator for Electronic, Inc. has created an extranet, a portion of the
Electronic, Inc. private network that is available to business partners through secured
VPN connections. The Electronic, Inc. extranet is the network attached to the
Electronic, Inc. VPN server and contains a file server and a Web server. Parts
distributors Tasmanian Traders and Parnell Aerospace are Electronic, Inc. business
partners and connect to the Electronic, Inc. extranet by using on-demand, router-to-
router VPN connections. An additional access policy is used to ensure that the
business partners can only access the extranet file server and Web server The file
server on the Electronic, Inc. extranet is configured with an IP address of [Link],
and the Web server is configured with an IP address of [Link]. Tasmanian
Traders uses the public network ID of [Link] with a subnet mask of
[Link]. Parnell Aerospace uses the public network ID of [Link] with a
subnet mask of [Link]. To ensure that the extranet Web server and file server
can reach the business partners, static routes are configured on the file server and Web
server for each of the business partner networks that use the gateway address of
[Link],To simplify configuration, the VPN connection is a one-way initiated
connection. The connection is always initiated by the business partner router. For
more information, see One-way initiated demand-dial connections.
The following illustration shows the Electronic, Inc. VPN server that provides extranet
connections for business partners.
Extranet For Business Partners With Help Of VPN

Department of MCA CIT, Mandya Page 19 of 21

 VIRTUAL PRIVATE NETWORK SERVER

CONCLUSION
Virtual Private networks are the best solution to have a private network regarding the security
point of view. In addition to Internet connection sharing, printer sharing and file sharing are an
important benefit of a home network. A VPN (Virtual Private Network) is a powerful tool
for protecting your online privacy, securing your internet connection, and accessing content from
around the world. It encrypts your data, allowing you to browse the internet securely without fear
of hackers, government surveillance, or geo-restrictions. Choosing the right VPN depends on
your needs—whether you're a casual user who wants to access streaming content, a remote
worker needing secure access to company resources, or an enterprise requiring complex, site-to-
site connections. By understanding how VPNs work and the different types available, you can
make an informed decision and take control of your online privacy and security. As we have
gone through all possible details we conclude that VPN is the best option for the corporate
networking. VPN server offers significant benefits, particularly in enhancing privacy, securing
sensitive data, and providing access to geographically restricted content. The ability to maintain
anonymity online, safeguard data on public networks, and bypass censorship makes VPNs an
essential tool for both individual users and organizations. However, there are some trade-offs to
consider. VPN usage can lead to reduced internet speeds, occasional connection instability, and
potential legal or policy issues, depending on the country or service being accessed. Additionally,
while VPNs offer security, not all providers are equal, and some free services may compromise
your data privacy. Therefore, when selecting a VPN service, it is crucial to choose a reliable
provider that balances security, speed, and cost. Ultimately, for users who prioritize privacy and
secure online activity, a VPN remains a valuable and effective tool.
A case study of a VPN server would explore how a company or individual utilized a VPN
(Virtual Private Network) to address specific needs, such as enhanced security, remote access,
or bypassing geo-restrictions. These case studies often highlight the benefits, challenges, and the
overall effectiveness of the chosen VPN solution. virtual private network (VPN) extends a
private network across a public network and enables users to send and receive data across shared
or public networks as if their computing devices were directly connected to the private network.,
security, and management of the private network,

Department of MCA CIT, Mandya Page 20 of 21

VIRTUAL PRIVATE NETWORK SERVER

REFERENCES
[1] Stevens, R. (2005). VPNs Illustrated: Tunnels, VPNs, and IPsec. Addison-Wesley
Professional.
[2] Scott, C., Wolfe, P., & Erwin, M. (1999). Virtual Private Networks: Making the Right
Connection.
[3] Mishra, S., & Tapaswi, S. (2013). "A Comparative Study of Different VPN Protocols."
International Journal of Computer Applications, 67(20), 1–6.
[4] Stallings, W. (2020). Foundations of Modern Networking: SDN, NFV, QoE, IoT, and
Cloud. Pearson.
[5] Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th
ed.). Pearson.
[6] Oppliger, R. (2016). Secure Messaging on the Internet: From Email to Secure Instant
Messaging. Springer.
[7] Zhao, W., & Wang, Y. (2020). "Design and Implementation of VPN Based on Open
VPN," IEEE Access, 8, 14532–14539.
[8] Cisco Systems. (2023). VPN Solutions for Enterprise Networks. Cisco White Paper.

[9] Barret, D., Silverman, R., & Byrnes, R. (2014). SSH, The Secure Shell: The Definitive
Guide (2nd ed.). O’Reilly Media.
[10] RFC 4026 – IETF (2005). Provider Provisioned VPN Terminology.
[Link]

Department of MCA CIT, Mandya Page 21 of 21

VIRTUAL PRIVATE NETWORK SERVER

Department of MCA CIT, Mandya Page 22 of 21